Login handling

don't...ever use this, this is by far one of the dumbest ways to check
passwords are correct